Privacy Policy
Last updated: 27 September 2026
1. Who is responsible for your data
Controller: Urbano Mega (urbanomega.es), Madrid, Spain.
Contact for any privacy matter: info@urbanomega.es.
2. What data we collect
- Data you give us through our forms, WhatsApp, email or phone: name, email, phone/WhatsApp number, the service you are interested in, travel preferences (destination, dates, who is travelling) and anything you choose to write in your message.
- Browsing data collected through cookies, only if you accept them: see our Cookie Policy.
Please do not send us sensitive data (health, passport scans, etc.) through the website forms. If a service requires documents, we will tell you how to share them securely.
3. Why we use it and on what legal basis
| Purpose | Legal basis |
|---|---|
| Answering your request and preparing a proposal (travel, media or access services) | Pre-contractual measures at your request and your consent (art. 6.1.b and 6.1.a GDPR) |
| Managing the services you contract | Performance of a contract (art. 6.1.b GDPR) |
| Sending our newsletter, travel ideas and offers by email, only if you tick the newsletter box | Your consent (art. 6.1.a GDPR), which you can withdraw at any time |
| Website analytics and advertising measurement, only if you accept cookies | Your consent (art. 6.1.a GDPR) |
| Complying with legal obligations (accounting, tax) | Legal obligation (art. 6.1.c GDPR) |
4. How long we keep it
Enquiries that do not become a booking: up to 12 months after our last contact. Client data: for the duration of the service and afterwards for the periods required by law. Newsletter data: until you unsubscribe.
5. Who we share it with
- Licensed partners who deliver the service. For travel services, the licensed travel agencies in Spain and Venezuela that we work with, only the data needed to prepare and book your trip. For residency or business services, the qualified professional partners who handle the process, only with your agreement.
- Technology providers acting on our behalf: web hosting, email, Mailchimp (Intuit, newsletter), Google (Analytics) and Meta (advertising measurement and WhatsApp Business).
- Public authorities when required by law.
We never sell your data.
6. International transfers
Some providers (Google, Meta, Mailchimp) and our travel partners in Venezuela may process data outside the European Economic Area. Where this happens we rely on the safeguards provided by the GDPR, such as the EU-US Data Privacy Framework, standard contractual clauses, or the transfer being necessary to perform the service you requested.
7. Your rights
You can ask to access, rectify or delete your data, object to or restrict its use, request portability, and withdraw your consent at any time, by writing to info@urbanomega.es. Every newsletter includes an unsubscribe link. If you believe your rights have not been respected, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).
8. Security
We apply reasonable technical and organisational measures to protect your data against loss, misuse or unauthorised access.
9. Changes
We may update this policy. The date at the top shows the latest version.